Skip to content
OpenAdvisories
High · 7.5 CVE-2026-25114 EUVD-2026-8935GHSA-2xph-9rqm-66cr

CloudCharge cloudcharge.se Improper Restriction of Excessive Authentication Attempts

Published Feb 26, 2026 · Updated Mar 5, 2026 · Assigned by icscert

Description

The WebSocket Application Programming Interface lacks restrictions on
the number of authentication requests. This absence of rate limiting may
allow an attacker to conduct denial-of-service attacks by suppressing
or mis-routing legitimate charger telemetry, or conduct brute-force
attacks to gain unauthorized access.

Affected products

VendorProductAffectedFixed
CloudCharge cloudcharge.se All versions —

Advisories 1

References